Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136332e302f32342d3332203d3e20323632393839.roa
File:                     3139302e3130332e3136332e302f32342d3332203d3e20323632393839.roa (raw, json)
Hash identifier:          9uxkI5XaVjYQjcVf6qFSHRJqSQi3tIywZapCsHlmoTQ=
Subject key identifier:   89:8C:ED:DE:FA:36:D6:C1:D6:05:4F:6B:26:D8:77:E8:1F:01:3F:A1
Certificate issuer:       /CN=D322281463F194BEAD29926EC73A0E7378D1F259
Certificate serial:       2102DA07A01242810FF8818E7C3DDD105EEFE6E0
Authority key identifier: D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136332e302f32342d3332203d3e20323632393839.roa
Signing time:             Thu 06 Mar 2025 20:58:10 +0000
ROA not before:           Thu 06 Mar 2025 20:53:10 +0000
ROA not after:            Thu 05 Mar 2026 20:58:10 +0000
asID:                     262989
IP address blocks:        190.103.163.0/24 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:02:da:07:a0:12:42:81:0f:f8:81:8e:7c:3d:dd:10:5e:ef:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D322281463F194BEAD29926EC73A0E7378D1F259
        Validity
            Not Before: Mar  6 20:53:10 2025 GMT
            Not After : Mar  5 20:58:10 2026 GMT
        Subject: CN=898CEDDEFA36D6C1D6054F6B26D877E81F013FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:64:ab:84:2a:61:cc:1a:aa:d5:4c:6b:2c:42:
                    57:a9:55:27:f7:18:48:57:8d:2f:a4:50:b2:70:82:
                    e2:17:78:88:de:de:31:8f:66:a5:3d:96:cb:91:b6:
                    85:ca:b8:69:14:2e:b5:76:52:69:2b:ae:af:c7:3f:
                    63:aa:6c:07:b3:d5:87:4c:08:ff:ec:db:1c:7b:df:
                    a3:89:50:0c:4c:4a:a4:d4:bc:b4:63:9a:56:25:05:
                    88:02:41:65:22:a3:ce:f7:7b:35:05:89:b3:74:66:
                    7f:f6:08:3e:d1:90:3f:11:5c:73:eb:23:34:6f:ca:
                    3a:6f:7c:a2:0c:97:3f:ec:bd:88:d0:ce:76:53:91:
                    8c:b4:79:70:e3:b7:f3:0d:e6:e4:25:52:fe:24:ea:
                    c1:f6:57:e0:5c:f3:40:c9:91:69:05:2f:c6:49:58:
                    4c:e6:69:08:51:64:79:2b:88:4c:d6:82:81:2b:07:
                    d4:a8:c1:d6:31:67:5f:62:5f:50:5a:2b:d7:48:45:
                    a9:ed:7e:1a:f2:e0:f9:03:a7:8f:1c:42:d5:d7:b2:
                    c6:8c:5b:b8:ad:24:d3:e3:24:eb:0b:bb:7b:06:dc:
                    2b:be:c9:d1:79:ec:6b:9a:1d:97:6d:31:4d:1b:c7:
                    59:08:72:e3:58:7c:e3:dc:20:61:e4:11:5a:f4:ad:
                    f8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8C:ED:DE:FA:36:D6:C1:D6:05:4F:6B:26:D8:77:E8:1F:01:3F:A1
            X509v3 Authority Key Identifier:
                keyid:D3:22:28:14:63:F1:94:BE:AD:29:92:6E:C7:3A:0E:73:78:D1:F2:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/D322281463F194BEAD29926EC73A0E7378D1F259.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D322281463F194BEAD29926EC73A0E7378D1F259.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4v1ArkdPciMWNVFLkx6xFwscab1Q3jHJwBRHgUaREqqM/1/3139302e3130332e3136332e302f32342d3332203d3e20323632393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:0c:e4:21:3c:6f:6d:9c:54:06:14:45:fc:b0:ec:c8:be:22:
         ef:e5:f7:86:c2:f2:f5:93:4a:47:3d:80:70:23:79:3b:d7:1a:
         76:f3:e8:14:45:10:82:51:35:c3:30:29:37:e2:ea:4d:63:48:
         3a:d0:8f:30:9c:77:7c:27:15:69:0b:63:05:59:1f:df:02:9c:
         f5:8f:6b:56:31:c2:a6:62:73:76:70:fa:17:74:9e:85:fc:23:
         ee:24:f0:e8:3d:33:32:a7:ab:91:a8:d4:7f:fd:e9:58:eb:90:
         b2:1c:f7:58:6b:d4:c7:a4:e3:40:cf:39:b5:34:b0:34:62:6f:
         c7:bd:67:53:bc:f5:2f:20:d6:71:9b:11:84:ee:0e:24:5e:29:
         e7:d9:4c:5f:71:0b:41:d8:ad:16:19:6c:3b:7c:2b:fb:5b:b2:
         bc:4b:aa:62:c0:77:a3:c2:b9:c1:01:07:b2:d4:b9:b8:6b:dc:
         5e:d3:13:f9:a4:ed:d3:5f:b7:2a:c0:73:8f:df:76:f5:8d:7d:
         f2:51:fe:2d:e5:a9:31:b2:8d:c7:1d:df:cf:5e:23:6a:af:ca:
         2b:2c:c6:a0:7f:0d:f1:a2:ab:dd:fc:dd:4f:fe:73:76:b3:f3:
         f4:28:1e:4e:21:d7:c1:49:ff:1e:22:d0:bd:94:cd:d3:06:9b:
         65:02:a8:08
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUIQLaB6ASQoEP+IGOfD3dEF7v5uAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDMyMjI4MTQ2M0YxOTRCRUFEMjk5MjZFQzczQTBFNzM3
OEQxRjI1OTAeFw0yNTAzMDYyMDUzMTBaFw0yNjAzMDUyMDU4MTBaMDMxMTAvBgNV
BAMTKDg5OENFRERFRkEzNkQ2QzFENjA1NEY2QjI2RDg3N0U4MUYwMTNGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZKuEKmHMGqrVTGssQlepVSf3
GEhXjS+kULJwguIXeIje3jGPZqU9lsuRtoXKuGkULrV2Umkrrq/HP2OqbAez1YdM
CP/s2xx736OJUAxMSqTUvLRjmlYlBYgCQWUio873ezUFibN0Zn/2CD7RkD8RXHPr
IzRvyjpvfKIMlz/svYjQznZTkYy0eXDjt/MN5uQlUv4k6sH2V+Bc80DJkWkFL8ZJ
WEzmaQhRZHkriEzWgoErB9SowdYxZ19iX1BaK9dIRantfhry4PkDp48cQtXXssaM
W7itJNPjJOsLu3sG3Cu+ydF57GuaHZdtMU0bx1kIcuNYfOPcIGHkEVr0rfjxAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUiYzt3vo21sHWBU9rJth36B8BP6EwHwYDVR0j
BBgwFoAU0yIoFGPxlL6tKZJuxzoOc3jR8lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHYxQXJrZFBjaU1XTlZGTGt4NnhGd3NjYWIxUTNqSEp3QlJIZ1VhUkVx
cU0vMS9EMzIyMjgxNDYzRjE5NEJFQUQyOTkyNkVDNzNBMEU3Mzc4RDFGMjU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QzMjIyODE0NjNGMTk0QkVB
RDI5OTI2RUM3M0EwRTczNzhEMUYyNTkuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2MUFya2RQY2lNV05WRkxreDZ4RndzY2FiMVEzakhKd0JSSGdVYVJFcXFNLzEv
MzEzOTMwMmUzMTMwMzMyZTMxMzYzMzJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMy
MzYzMjM5MzgzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAL5nozANBgkqhkiG9w0BAQsFAAOCAQEAZgzk
ITxvbZxUBhRF/LDsyL4i7+X3hsLy9ZNKRz2AcCN5O9cadvPoFEUQglE1wzApN+Lq
TWNIOtCPMJx3fCcVaQtjBVkf3wKc9Y9rVjHCpmJzdnD6F3Sehfwj7iTw6D0zMqer
kajUf/3pWOuQshz3WGvUx6TjQM85tTSwNGJvx71nU7z1LyDWcZsRhO4OJF4p59lM
X3ELQditFhlsO3wr+1uyvEuqYsB3o8K5wQEHstS5uGvcXtMT+aTt01+3KsBzj992
9Y198lH+LeWpMbKNxx3fz14jaq/KKyzGoH8N8aKr3fzdT/5zdrPz9CgeTiHXwUn/
HiLQvZTN0wabZQKoCA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:53:29 2025 by rpki-client